12 matches found
CVE-2019-25401: Uncontrolled Resource Consumption
Bematech formerly Logic Controls, now Elgin MP-4200 TH printer contains a denial of service vulnerability in the admin configuration page. Remote attackers can send crafted POST requests with malformed 'admin' and 'person' parameters to crash the printer's web service, causing a denial of service...
CVE-2019-25356: Improper Neutralization of Input During Web Page Generation
Bematech formerly Logic Controls, now Elgin MP-4200 TH printer contains a cross-site scripting vulnerability in the admin configuration page. Attackers can inject malicious scripts via crafted POST requests with malformed 'admin' and 'person' parameters, allowing execution of arbitrary JavaScript...
Simple Pizza Ordering System paymentportal.php File SQL Injection Vulnerability
Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter person in the file /paymentportal.php. The vulnerability can be...
CVE-2025-6357
A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /paymentportal.php. The manipulation of the argument person leads to sql injection. It is possible to launch the attack remotely. The exploi...
Code-Projects Simple Pizza Ordering System Injection Vulnerabilities
Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter person in the file /paymentportal.php. The vulnerability can be...
PT-2025-3758 · Unknown · Code-Projects Job Recruitment
Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A critical vulnerability has been found in code-projects Job Recruitment, affecting an unknown part of the file / parse/ feedback system.php. The manipulation of the person argument leads...
Code-Projects Job Recruitment Injection Vulnerabilities
Code-Projects Job Recruitment is an open source job portal from Code-Projects. An injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from an incorrect manipulation of the parameter person that can lead to SQL injection...
CVE-2024-8561
A vulnerability has been found in SourceCodester PHP CRUD 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete.php of the component Delete Person Handler. The manipulation of the argument person leads to sql injection. The attack...
PHP CRUD SQL injection vulnerabilities
PHP CRUD is a PHP-based implementation of add, delete and retrieve. A SQL injection vulnerability exists in PHP CRUD version 1.0, which stems from an SQL injection vulnerability contained in the person parameter of the /endpoint/delete.php file...
Sql injection
SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter...
CVE-2008-0845: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter...
CVE-2003-0624: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attackers to inject malicious web script via the person parameter...